Update github-actions deps

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/dependency-review-action	action	minor	v4.6.0 -> v4.7.1
actions/setup-go	action	minor	v5.4.0 -> v5.5.0
anchore/sbom-action	action	minor	v0.19.0 -> v0.20.0

---

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

v4.7.1

Compare Source

• Packages added to allow-dependencies-licenses will be allowed even if the package in question has no license information #​889
• License expressions (e.g. Ruby OR GPL-2.0) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g. Ruby)

v4.7.0

Compare Source

• Handle complex license expressions (e.g. MIT AND GPL-2.0) in allow lists (fixes #​809 and probably others)
• Replace OTHER in package licenses with LicenseRef-clearlydefined-OTHER so that parsing passes

actions/setup-go (actions/setup-go)

v5.5.0

Compare Source

What's Changed

Bug fixes:

• Update self-hosted environment validation by @​priyagupta108 in https://github.com/actions/setup-go/pull/556
• Add manifest validation and improve error handling by @​priyagupta108 in https://github.com/actions/setup-go/pull/586
• Update template link by @​jsoref in https://github.com/actions/setup-go/pull/527

Dependency updates:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in https://github.com/actions/setup-go/pull/574
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in https://github.com/actions/setup-go/pull/573
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in https://github.com/actions/setup-go/pull/582
• Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @​dependabot in https://github.com/actions/setup-go/pull/537

New Contributors

• @​jsoref made their first contribution in https://github.com/actions/setup-go/pull/527

Full Changelog: actions/setup-go@v5...v5.5.0

anchore/sbom-action (anchore/sbom-action)

v0.20.0

Compare Source

Changes in v0.20.0

• chore(deps): update Syft to v1.24.0 (#​522)

---

Configuration

📅 Schedule: Branch creation - "on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 96.20%. Comparing base (d41015b) to head (501d509).
Report is 7 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7174      +/-   ##
==========================================
+ Coverage   96.18%   96.20%   +0.01%     
==========================================
  Files         361      361              
  Lines       21836    21836              
==========================================
+ Hits        21004    21007       +3     
+ Misses        622      620       -2     
+ Partials      210      209       -1     

Flag	Coverage Δ
badger_v1	9.87% <ø> (ø)
badger_v2	1.90% <ø> (ø)
cassandra-4.x-v1-manual	14.85% <ø> (ø)
cassandra-4.x-v2-auto	1.89% <ø> (ø)
cassandra-4.x-v2-manual	1.89% <ø> (ø)
cassandra-5.x-v1-manual	14.85% <ø> (ø)
cassandra-5.x-v2-auto	1.89% <ø> (ø)
cassandra-5.x-v2-manual	1.89% <ø> (ø)
elasticsearch-6.x-v1	20.69% <ø> (ø)
elasticsearch-7.x-v1	20.77% <ø> (ø)
elasticsearch-8.x-v1	20.95% <ø> (ø)
elasticsearch-8.x-v2	1.90% <ø> (ø)
grpc_v1	11.41% <ø> (ø)
grpc_v2	1.90% <ø> (ø)
kafka-3.x-v1	10.14% <ø> (ø)
kafka-3.x-v2	1.90% <ø> (ø)
memory_v2	1.90% <ø> (ø)
opensearch-1.x-v1	20.82% <ø> (ø)
opensearch-2.x-v1	20.82% <ø> (ø)
opensearch-2.x-v2	1.90% <ø> (ø)
query	1.90% <ø> (ø)
tailsampling-processor	0.51% <ø> (ø)
unittests	95.02% <ø> (+0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.